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(54) Packet transfer scheme using mobile terminal and router for preventing attacks using global 
address 



(57) In a mobile communication network providing 
an internet service, the arrived packets are delivered 
from the nearest neighbor router device to the mobile 
terminal device according to the need such as when a 
prescribed application is activated or when a prescribed 



packer has arrived, by using message exchanges be- 
tween the nearest neighbor router device and the mobile 
terminal device, so that it becomes possible to prevent 
the unnecessary packet attacksfrom the global Internet. 
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Description 

BACKGROUND OF THE INVENTION 
FIELD OF THE INVENTION 

[0001] The present invention relates to a mobile com- 
munication device for carrying out communications 
while moving among a plurality of interconnected net- 
works such as mobile telephone network. Internet, lo- 
cally connected device network, and a router device pro- 
vided in a mobile communication network for providing 
the Internet service. 

DESCRIPTION OF THE RELATED ART 

[0002] In conjunction with the rapid spread of portable 
telephones and the Internet, the Internet service using 
a portable telephone as a terminal has been developed 
by the mobile carriers. This is a service in which a mod- 
ule for processing a communication protocol called 
TCP/IP used in the Internet is provided in the portable 
telephone so as to enable WWW service, e-mail deliv- 
ery, still/video image transfer, etc. This service has an 
advantage in that it becomes possible to freely access 
not just information closed within the communication 
service provider but also various information available 
on the Internet that is spreading worldwide, and for this 
reason the number of users of this service is increasing 
rapidly. 

[0003] Now, the portable telephone Internet service 
that has an enormous number of users encounters a se- 
rious problem regarding how to assign addresses to ter- 
minals. Currently, the Internet faces with the problem of 
IP address shortage in view of the ever increasing 
number of nodes (routers and terminals), and in the cur- 
rent IPv4, it has been customary to use an address sys- 
tem called private address that is closed within an or- 
ganization for accesses in an enterprise network or the 
like and to use global addresses only for accesses to 
the external of the organization by utilizing the address 
conversion. Similarly, in the case of the portable tele- 
phone Internet service, it is currently customary to use 
the private address within the cellular phone network by 
providing an address conversion device (NAT: Network 
Address Translator) at a border between the IP packet 
network of the portable telephone company and the glo- 
bal Internet. 

[0004] On the other hand, the next generation IP 
specification called IPv6 is currently under the discus- 
sion. The IPv6 can accommodate far more nodes com- 
pared with the IPv4 by expanding the IP address from 
a 32 bits width as used in the IPv4 to a 128 bits width. 
Similarly, in the case of the portable telephone Internet 
service, it is possible to assign unique global addresses 
to all terminals by adopting the IPv6. In this way, com- 
munications using a seamless end-to-end connection 
that does not require a relay device such as NAT on the 



communication path can be realized by using a wide ad- 
dress space, and it is expected to be advantageous in 
many aspects including the security and the communi- 
cation quality guarantee. 
s [0005] The I Pv6 has various advantages as described 
above, but from a viewpoint of operating the actual port- 
able telephone Internet, for example, always assigning 
a global address to each terminal can cause a problem. 
Namely, when a global address is assigned to a termi- 
nal, this terminal becomes accessible from all nodes on 
the Internet so that this terminal can potentially be a tar- 
get of attacks such as that for sending a large amount 
of unnecessary packets, for example. 
[0006] However, a provision of providing a packet fil- 
ter or a firewall on a route in order to prevent such at- 
tacks is not preferable because it goes against the es- 
sence of the IPv6 that transparent end-to-end commu- 
nications are possible. Also, a more passive provision 
of not registering a name of a terminal to a name server 
in order to prevent attacks from the external does not 
provide a full solution to the problem because the 
number of applications that require the resolution of a 
name of a terminal itself such as VoIP is increasing. 



[0007] It is therefore an object of the present invention 
to provide a packet transfer scheme using a mobile ter- 
minal device and a router device, in which each mobile 
terminal device can carry out transparent end-to-end 
communications with arbitrary node on the Internet by 
using a global address of the IPv6 in full compliance with 
the IPv6 system and policy, while realizing a function for 
preventing attacks such as that of packet transmission 
to a global address. 

[0008] According to one aspect of the present inven- 
tion there is provided a packet transfer method, com- 
prising: generating a global address that is unique on 
Internet at a mobile terminal device, the global address 
being an address which should be used by the mobile 
terminal device in utilizing an Internet service provided 
by a mobile communication network to which the mobile 
terminal device is connected, according to a message 
received from a nearest neighbor router device in the 
mobile communication network; notifying a first mes- 
sage indicating a start of a utilization of the Internet serv- 
ice using the global address, from the mobile terminal 
device to the nearest neighbor router device at a time 
of starting the utilization of the internet service using the 
global address; delivering arrived packets destined to 
the global address of the mobile terminal device from 
the nearest neighbor router device to the mobile termi- 
nal device upon receiving the first message at the near- 
est neighbor router device; notifying a second message 
indicating an end of the utilization of the Internet service 
using the global address from the mobile terminal device 
to the nearest neighbor router device at a time of ending 
the utilization of the Internet service using the global ad- 
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dress; and discarding arrived packets destined to the 
global address of the mobile terminal device at the near- 
est neighbor router device upon receiving the second 
message at the nearest neighbor router device. 
[0009] According to another aspect of the present in- 
vention there is provided a packet transfer method, com- 
prising: generating a global address that is unique on 
Internet at a mobile terminal device, the global address 
being an address which should be used by the mobile 
terminal device in utilizing an Internet service provided 
by a mobile communication network to which the mobile 
terminal device is connected, according to a message 
received from a nearest neighbor router device in the 
mobile communication network; notifying a first mes- 
sage indicating a start of a utilization of the Internet serv- 
ice using the global address, from the mobile terminal 
device to the nearest neighbor router device at a time 
of starting the utiiization of the Internet service using the 
global address; delivering arrived packets destined to 
the global address of the mobile terminal device from 
the nearest neighbor router device to the mobile termi- 
nal device upon receiving the first message at the near- 
est neighbor router device; notifying a second message 
from the mobile terminal device to the nearest neighbor 
router device, when delivery to the mobile terminal de- 
vice of a specific packet that is destined to the global 
address of the mobile terminal device and that has been 
delivered from the nearest neighbor router device is not 
desired, the second message indicating a desire for not 
receiving the delivery of the specific packet to the mobile 
terminal device and a prescribed condition to be satis- 
fied by the specific packet; and discarding the specific 
packet that satisfies the prescribed condition indicated 
by the second message among arrived packets des- 
tined to the global address of the mobile terminal device 
at the nearest neighbor router device after receiving the 
second message from the mobile terminal device at the 
nearest neighbor router device. 
[0010] According to another aspect of the present in- 
vention there is provided a mobile terminal device, com- 
prising: a communication interface configured to make 
access to a mobile communication network; an address 
setting unit configured to set up a global address that is 
unique on Internet and that should be used by the mobile 
terminal device in packet communications utilizing an 
Internet service provided by the mobile communication 
network, according to a message received from a near- 
est neighbor router device in the mobile communication 
network; and a packet communication unit configured 
to carry out the packet communications utilizing the In- 
ternet service, notify a first message indicating a start 
of a utilization of the Internet service using the global 
address to the nearest neighbor router device at a time 
of starting the utiiization of the Internet service using the 
global address, and notify a second message indicating 
an end of the utilization of the Internet service using the 
global address to the nearest neighbor router device at 
a time of ending the utilization of the Internet service 



using the global address. 

[001 1 ] According to another aspect of the present in- 
vention there is provided a mobile terminal device, com- 
prising: a communication interface configured to make 

5 access to a mobile communication network; an address 
setting unit configured to set up a global address that is 
unique on internet and that should be used by the mobile 
terminal device in packet communications utilizing an 
Internet service provided by the mobile communication 

10 network, according to a message received from a near- 
est neighbor router device in the mobile communication 
network; and a packet communication unit configured 
to carry out the packet communications utilizing the In- 
ternet service, notify a first message indicating a start 

is of a utilization of the Internet service using the global 
address to the nearest neighbor router device at a time 
of starting the utilization of the Internet service using the 
global address, and notify a second message to the 
nearest neighbor router device, when delivery to the mo- 

20 bile terminal device of a specific packet that is destined 
to the global address of the mobile terminal device and 
that has been delivered from the nearest neighbor router 
device is not desired, the second message indicating a 
desire for not receiving the delivery of the specific packet 

25 to the mobile terminal device and a prescribed condition 
to be satisfied by the specific packet. 
[0012] According to another aspect of the present in- 
vention there is provided a router device provided in a 
mobile communication network providing an Internet 

30 service, the router device comprising: a message 
processing unit configured to transmit a router message 
to be used in assigning a global address that is unique 
on Internet with respect to a mobile terminal device with- 
in a network link to which the router device is connected; 

35 and a router processing unit configured to deliver arrived 
packets destined to the global address of the mobile ter- 
minal device, to the mobile terminal device upon receiv- 
ing a first message indicating a start of a utilization of 
the Internet service using the global address from the 

40 mobile terminal device, and discard arrived packets 
destined to the global address of the mobile terminal de- 
vice upon receiving a second message indicating an 
end of the utilization of the Internet service using the 
global address from the mobile terminal device. 

45 [0013] According to another aspect of the present in- 
vention there is provided a router device provided in a 
mobile communication network providing an Internet 
service, the router device comprising: a message 
processing unit configured to transmit a router message 

50 to be used in assigning a global address that is unique 
on Internet with respect to a mobile terminal device with- 
in a network link to which the router device is connected; 
and a router processing unit configured to deliver arrived 
packets destined to the global address of the mobile ter- 

55 minal device, to the mobile terminal device upon receiv- 
ing a first message indicating a start of a utilization of 
the Internet service using the global address from the 
mobile terminal device, and discard a specific packet 
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that satisfies a prescribed condition indicated by a sec- 
ond message among arrived packets destined to the 
global address of the mobile terminal device after re- 
ceiving a second message from the mobile terminal de- 
vice, the second message indicating a desire for not re- 
ceiving delivery to the mobile terminal device of the spe- 
cific packet that is destined to the global address of the 
mobile terminal device and the prescribed condition to 
be satisfied by the specific packet. ' 
[0014] According to another aspect of the present in- 
vention there is provided a computer program product 
for causing a computer to function as a mobile terminal 
device, the computer program product comprising: first 
computer program codes for causing the computer to 
make access to a mobile communication network; sec- 
ond computer program codes for causing the computer 
to set up a global address that is unique on Internet and 
that should be used by the mobile terminal device in 
packet communications utilizing an Internet service pro- 
vided by the mobile communication network, according 
to a message received from a nearest neighbor router 
device in the mobile communication network; and third 
computer program codes for causing the computer to 
carry out the packet communications utilizing the Inter- 
net service, notify a first message indicating a start of a 
utilization of the Internet service using the global ad- 
dress to the nearest neighbor router device at a time of 
starting the utilization of the Internet service using the 
global address, and notify a second message indicating 
an end of the utilization of the Internet service using the 
global address to the nearest neighbor router device at 
a time of ending the utilization of the Internet service 
using the global address. 

[001 5] Accordi ng to another aspect of the present in- 
vention there is provided a computer program product 
for causing a computer to function as a mobile terminal 
device, the computer program product comprising: first 
computer program codes for causing the computer to 
make access to a mobile communication network; sec- 
ond computer program codes for causing the computer 
to set up a global address that is unique on Internet and 
that should be used by the mobile terminal device in 
packet communications utilizing an Internet service pro- 
vided by the mobile communication network, according 
to a message received from a nearest neighbor router 
device in the mobile communication network; and third 
computer program codes for causing the computer to 
carry out the packet communications utilizing the Inter- 
net service, notify a first message indicating a start of a 
utilization of the Internet service using the global ad- 
dress to the nearest neighbor router device at a time of 
starting the utilization of the Internet service using the 
global address, and notify a second message to the 
nearest neighbor router device, when delivery to the mo- 
bile terminal device of a specific packet that is destined 
to the global address of the mobile terminal device and 
that has been delivered from the nearest neighbor router 
device is not desired, the second message indicating a 
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desire for not receiving the delivery of the specific packet 
to the mobile terminal device and a prescribed condition 
to be satisfied by the specific packet. 
[0016] According to another aspect of the present in- 

5 vention there is provided a computer program product 
for causing a computer to function as a router device 
provided in a mobile communication network providing 
an Internet service, the computer program product com- 
prising: first computer program codes for causing the 

io computer to transmit a router message to be used in 
assigning a global address that is unique on Internet 
with respect to a mobile terminal device within a network 
link to which the router device is connected; and second 
computer program codes for causing the computer to 

15 deliver arrived packets destined to the global address 
of the mobile terminal device, to the mobile terminal de- 
vice upon receiving a first message indicating a start of 
a utilization of the Internet service using the global ad- 
dress from the mobile terminal device, and discard ar- 

20 rived packets destined to the global address of the mo- 
bile terminal device upon receiving a second message 
indicating an end of the utilization of the Internet service 
using the global address from the mobile terminal de- 
vice. 

25 [0017] According to another aspect of the present in- 
vention there is provided a computer program product 
for causing a computer to function a router device pro- 
vided in a mobile communication network providing an 
Internet service, the computer program product com- 

30 prising: first computer program codes for causing the 
computer to transmit a router message to be used in 
assigning a global address that is unique on Internet 
with respect to a mobile terminal device within a network 
link to which the router device is connected; and second 

35 computer program codes for causing the computer to 
deliver arrived packets destined to the global address 
of the mobile terminal device, to the mobile terminal de- 
vice upon receiving a first message indicating a start of 
a utilization of the Internet service using the global ad- 

40 dress from the mobile terminal device, and discard a 
specific packet that satisfies a prescribed condition in- 
dicated by a second message among arrived packets 
destined to the global address of the mobile terminal de- 
vice after receiving a second message from the mobile 

45 terminal device, the second message indicating a desire 
for not receiving delivery to the mobile terminal device 
of the specific packet that is destined to the global ad- 
dress of the mobile terminal device and the prescribed 
condition to be satisfied by the specific packet. 

so [001 8] The present invention can be implemented ei- 
ther in hardware or on software in a general purpose 
computer. Further the present invention can be imple- 
mented in a combination of hardware and software. The 
present invention can also be implemented by a single 

55 processing apparatus or a distributed network of 
processing apparatuses. 

[001 9] Since the present invention can be implement- 
ed by software, the present invention encompasses 
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computer code provided to a general purpose computer 
on any suitable carrier medium. The carrier medium can 
comprise any storage medium such as a floppy disk, a 
CD ROM, a magnetic device or a programmable mem- 
ory device, or any transient medium such as any signal 
e.g. an electrical, optical or microwave signal. 
[0020] Other features and advantages of the present 
invention will become apparent from the following de- 
scription taken in conjunction with the accompanying 
drawings. 

[0021] Fig. 1 is a block diagram showing an exempla- 
ry configuration of a communication system according 
to one embodiment of the present invention. 
[0022] Fig. 2 is a block diagram showing an exempla- 
ry configuration of a router device in the communication 
system of Fig. 1 . 

[0023] Fig. 3 is a block diagram showing an exempla- 
ry configuration of a mobile terminal device in the com- 
munication system of Fig. 1 . 

[0024] Fig. 4 is a sequence chart showing an exem- 
plary procedure at a time of starting the use of a global 
address in the communication system of Fig. 1 . 
[0025] Fig. 5 is a flow chart showing an exemplary 
processing procedure of a mobile terminal device at a 
time of starting the use of a global address by the pro- 
cedure of Fig. 4. 

[0026] Fig. 6 is a sequence chart showing an exem- 
plary procedure at a time of ending the use of a global 
address in the communication system of Fig. 1 . 
[0027] Fig. 7 is a flow chart showing an exemplary 
processing procedure of a mobile terminal device at a 
time of starting the use of a global address by the pro- 
cedure of Fig. 6. 

[0028] Fig. 8 is a block diagram showing another ex- 
emplary configuration of a router device in the commu- 
nication system of Fig. 1 . 

[0029] Fig. 9 is a sequence chart showing an exem- 
plary procedure at a time of permitting delivery of spe- 
cific packets to a mobile terminal device in the commu- 
nication system of Fig. 1 . 

[0030] Fig. 10 is a flow chart showing an exemplary 
processing procedure of a router device at a time of per- 
mitting delivery of specific packets to a mobile terminal 
device by the procedure of Fig. 9. 
[0031] Fig. 11 is a sequence chart showing another 
exemplary procedure at a time of permitting delivery of 
specific packets to a mobile terminal device in the com- 
munication system of Fig. 1 . 

[0032] Fig. 12 is a diagram showing an exemplary 
message format for a receiving rejection message to be 
used at a time of permitting delivery of specific packets 
to a mobile terminal device by the procedure of Fig. 11 . 
[0033] Fig. 1 3 is a flow chart showing another exem- 
plary processing procedure of a router device at a time 
of permitting delivery of specific packets to a mobile ter- 
minal device by the procedure of Fig. 11 . 



DETAILED DESCRIPTION OF THE INVENTION 

[0034] Referring now to Fig. 1 to Fig. 1 3, one embod- 
iment of a communication system according to the 
5 present invention will be described in detail. 

[0035] Fig. 1 shows an exemplary configuration of a 
communication system according to this embodiment. 
[0036] In Fig. 1 , a region enclosed by a dashed line 
12 corresponds to a mobile carrier network portion. In 
the mobile carrier network 1 2, a plurality of network links 
are connected through a cellular phone network 6 and 
router devices 4. The mobile carrier network 12 is as- 
sumed to be originally providing the ordinary voice com- 
munication service, but a configuration for providing the 
ordinary voice communication service is omitted in Fig. 
1. 

[0037] Note that this embodiment is directed to the ex- 
emplary case where one mobile carrier manages its own 
packet communication network as a single manage- 
ment domain, but there can also be cases where one 
mobile carrier has a plurality of management domains, 
cases where a plurality of mobile carriers have a single 
common management domain, and any combination of 
these cases. 

[0038] The mobile terminal device 1 (such as a port- 
able terminal or a portable telephone, for example) will 
be connected to the corresponding network link through 
a wireless base station 5 corresponding to a geographic 
location of the mobile terminal device 1 . Then, the mo- 
bile terminal device 1 becomes capable of carrying out 
packet communications with a node located within the 
same network link, a node within the same management 
domain through the router device 4, or a node located 
outside the management domain through the router de- 
vice 4 and the Internet 7. 

[0039] Here, the case where the mobile terminal de- 
vice 1 carries out communications with correspondents 
(such as server devices 2a, 2b and 2c or correspondent 
terminal devices (other mobile terminal devices, for ex- 
ample) 3b and 3c) will be described. In this case, the 
relative positional relationship on the network between 
the mobile terminal device 1 and the correspondent can 
be any one of the following three cases: 

(1) a positional relationship of the case where the 
correspondent is connected to the same network 
link as the mobile terminal device 1 ; 

(2) a positional relationship of the case where the 
correspondent is connected to a network link which 
is different from that of the mobile terminal device 1 
and which is contained within the same manage- 
ment domain as the mobile terminal device 1 ; and 

(3) a positional relationship of the case where the 
correspondent is not connected to a network link 
that is contained in the same management domain 
as the mobile terminal device 1 , that is, the corre- 
spondent is connected to the general Internet dif- 
ferent from the network links of the above two cas- 
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[0040] In the example of Fig, 1 , the server device 2a 
corresponds to the positional relationship (1 ). the server 
device 2b and the correspondent terminal device 3b cor- 
respond to the positional relationship (2), and the server 
device 2c and the correspondent terminal device 3c cor- 
respond to the positional relationship (3). 
[0041] These three types of the positional relationship 
are in correspondence to the concept called "address 
scope" defined in the IPv6. In the IPv6, the following 
three address scopes are defined (see RFC 2373 for 
further details). 

(1) Link local address 

[0042] This is an address valid only within the same 
network link, which has a prefix of 1111 1110 10 in the 
IPv6. 

(2) Site local address 

[0043] This is an address valid only within the same 
management domain, which has a prefix of 1111 1110 
11 in the IPv6. 

(3) Global address 

[0044] This is an address which is unique over the en- 
tire Internet. 

[0045] Namely, in the example of Fig. 1, the mobile 
terminal device 1 can carry out communications using 
(arbitrary address containing) the link local address with 
respect to the server device 2a which is located on the 
same network link as the mobile terminal device 1 , and 
communications using a site local address (or a global 
address) with respect to a server device 2b which is lo- 
cated in the same management domain as the mobiie 
terminal device 1 . On the other hand, the mobile termi- 
nal device 1 will carry out communications using a global 
address with respect to the server device 2c which is 
located on the general Internet 7. 
[0046] In this embodiment, the packet transfer with re- 
spect to the mobile terminal device 1 will be controlled 
by using this address scope function. 
[0047] Fig. 2 shows an exemplary configuration of the 
router device 4 in this embodiment. 
[0048] This router device 4 has basic functions similar 
to those of an ordinary router compatible with the IPv6 
provided by an IPv6 router core 61 , but also has an ad- 
ditional function provided by a message processing unit 
62 for processing messages transmitted from the mobile 
terminal device 1 such as an address information noti- 
fication message and a neighbor cache entry deletion 
message. 

[0049] The message processing unit 62 analyzes the 
received message, and when the received message is 
the address information notification message, the mes- 
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sage processing unit 62 creates an entry corresponding 
to that mobile terminal device 1 (for indicating informa- 
tion on a correspondence between the global address 
of that mobile terminal device 1 and the MAC address 
5 on a link) in a neighbor cache 63 (which corresponds to 
the ARP table of the IPv4), whereas when the received 
message is the neighbor cache entry deletion message, 
the message processing unit 62 invalidates an entry cor- 
responding to that mobile terminal device 1 in the neigh- 
to bor cache 63. 

[0050] Fig. 3 shows an exemplary configuration of the 
mobile terminal device 1 in this embodiment. 
[0051] As shown in Fig. 3, this mobile terminal device 
1 comprises a communication interface 20, a voice corn- 
's munication unit 21 for carrying out ordinary voice com- 
munications, a packet communication unit 22 for carry- 
ing out packet communications according to the IPv6, 
an address register 23, an application list 24, a memory 
25 and an active register 26. 
20 [0052] The mobile terminal device 1 is capable of re- 
lating a plurality of IPv6 addresses with respect to one 
communication interface (capable of sending packets 
by using a plurality of IPv6 addresses from the same 
communication interface). The address register 23 is 
25 used for the purpose of storing these addresses. 

[0053] A various IPv6 applications are to be operated 
on the mobile terminal device 1 side, and an application 
list 24 is used for storing a list of these applications 
(which includes information for identifying each applica- 
30 tion (a file name, for example) and an application type 
of each application or a protocol type, for example). 
[0054] Also, when the specific application is activated 
by the user, the application is operated on the memory 
25, while the active register 27 registers information re- 
35 garding the currently operated application. 

[0055] The communication interface 20 of this mobile 
terminal device 1 can be always assigned with one or 
both of the link local address and the site local address. 
The link local address and the site local address will be 
40 derived from the prefix defined in the IPv6 and the de- 
vice ID of this mobile terminal device 1. Note that it is 
also possible for the communication service provider to 
assign arbitrary address as an address to be used in the 
same network link. Also, which one of the link local ad- 
45 dress alone, the site local address alone, and both the 
link local address and the site local address is to be al- 
ways assigned can be determined according to the pol- 
icy of the communication service provider. 
[0056] In this way, the mobile terminal device 1 be- 
so comes always capable of utilizing (carrying out commu- 
nications for) on-link services using (arbitrary address 
containing) the link local address (such as the advertise- 
ment delivery from a specific wireless base station 
group, for example), and/or services within domain 
55 which are services of the service provider in this embod- 
iment (such as information service limited to the users 
of that service provider, for example). 
[0057] On the other hand, the global address to be 
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assigned will be generated from a network prefix deliv- 
ered from the nearest neighbor router device 4 and the 
ID information (EUI-64) of the mobile terminal device 1 , 
according to the "Stateless Address Autoconfigu ration" 
(RFC 2461) defined in the IPv6. 
[0058] The basic procedure for the global address 
generation is as follows. Namely, the router device 4 
regularly broadcasts a router advertisement message 
on-link, or the router device 4 returns a response mes- 
sage upon receiving an inquiry message, and the mobile 
terminal device 1 receives the router advertisement 
message, or sends an inquiry message and receives the 
response message, generates the global address by us- 
ing the network prefix contained in the received mes- 
sage, and transmits an address information notification 
message containing the generated IPv6 address and a 
MAC address to the router device 4 side. Upon receiving 
the address information notification message, the router 
device 4 makes an entry of a corresponding information 
into the corresponding neighbor cache 63. As a result, 
the nearest neighbor router device 4 will carry out the 
delivery of packets destined to the mobile terminal de- 
vice 1 . 

[0059] Note that the user may be allowed to freely car- 
ry out the acquisition, setting and starting of the use of 
the IPv6 global address, or the discarding, setting and 
ending of the use of the IPv6 global address. However, 
in this embodiment, it is assumed that the processing 
for starting the use of the global address is carried out 
when the user of the mobile terminal device 1 activates 
an application that requires the global address, and the 
processing for ending the use of that global address is 
carried out when that application is terminated. In prac- 
tice, not necessarily ail of the applications that can be 
activated on the mobile terminal device 1 will make ac- 
cesses requiring global addresses, so that the pres- 
ence/absence of the use of the global address is regis- 
tered for each application in the application list 24, and 
the processing will be carried out only in relation to the 
activation or the termination of the application that re- 
quires the global address. 

[0060] First, the processing at a time of starting the 
use of the global address will be described. 
[0061] Fig. 4 shows an exemplary processing se- 
quence at a time of starting the use of the global ad- 
dress, and Fig. 5 shows an exemplary processing pro- 
cedure of the mobile terminal device 1 in this case. 
[0062] First, at the mobile terminal device 1 , the ap- 
plication that requires the global address is activated by 
the user. 

[0063] When the application is activated (step S11 
YES), the mobile terminal device 1 refers to the infor- 
mation registered in the application list 24 (such as an 
application type or a protocol type, for example) (step 
S12), and judges whether the activated application is 
one that requires the global address or not (step S13). 
When the activated application is one that requires the 
global address (step S13 YES), and acquires a network 



address from the nearest neighbor router device (step 
S14). 

[0064] Here, the mobile terminal device 1 transmits a 
router solicitation message (step S1), and in response 
s a response message (router advertisement message) 
is returned from the router device 4 to the mobile termi- 
nal device 1 (step S2). 

[0065] Upon receiving the response message from 
the router device 4, the mobile terminal device 1 gener- 
ates an IPv6 address by combining the network prefix 
contained in the response message with the device ID 
of the mobile terminal device 1 itself (step S15). 
[0066] The mobile terminal device 1 transmits an ad- 
dress information notification message containing the 
generated IPv6 address and the MAC address to the 
router device 4 (step S3, step S1 6). Also, the mobile ter- 
minal device 1 makes a setting of its own TCP/IP module 
according to that IPv6 address (step S1 7), and then op- 
erates that application. 

[0067] Note that, in the above, the mobile terminal de- 
vice 1 acquires the network address by transmitting the 
router solicitation message, but it is also possible for the 
mobile terminal device 1 to receive the router advertise- 
ment message of the router device 4 that is distributed 
on-link and store the network address into a register (not 
shown) in advance. In such a case, the procedure re- 
garding the router solicitation message transmission 
and the response message reception can be skipped in 
Fig. 4. 

[0068] Note also that, in the case where a plurality of 
applications can be activated on the mobile terminal de- 
vice 1 , it is possible to carry out the above described 
processing sequence when the activation of the appli- 
cation that requires the global address is detected first. 
[0069] Next, the processing at a time of ending the 
use of the global address will be described. 
[0070] Fig. 6 shows an exemplary processing se- 
quence at a time of ending the use of the global address, 
and Fig. 7 shows an exemplary processing procedure 
of the mobile terminal device 1 in this case. 
[0071] First, at the mobile terminal device 1 , the ap- 
plication that requires the global address is terminated 
by the user (or that application is forcefully terminated 
by the OS or the like). 

[0072] When the termination of the application is de- 
tected by referring to the active register 26 (step S31 
YES), the mobile terminal device 1 refers to the appli- 
cation list 24 (step S32) and judges whether the termi- 
nated application is one that requires the global address 
or not (step S33). When the terminal application is one 
that requires the global address (step S33 YES), the mo- 
bile terminal device 1 transmits a neighbor cache entry 
deletion message containing the IPv6 address and the 
MAC address to the nearest neighbor router device 4 
(step S21 , step S34). 

[0073] Upon receiving the neighbor cache entry dele- 
tion message, the router device 4 deletes the entry of 
this mobile terminal device t from the neighbor cache 
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63, and returns a response message to the mobile ter- 
minal device 1 (step S22). In this way, even when a 
packet destined to the global address of this mobile ter- 
minal device 1 arrives from the internet 7 side, it is re- 
garded as impossible to reach the destination at the 
router device 4 and processed as an error. From a view- 
point of an attacker on the Internet, this implies that even 
if an attack to send an enormous amount of packets us- 
ing "ping" or the like is attempted by learning the global 
address of this mobile terminal device 1 somehow, all 
the packets will be processed as errors (discarded) by 
the nearest neighbor router device 4 so that the attack 
will fail. 

[0074] Also, by sending the above described neighbor 
cache entry deletion message, there is no need to reset 
the global address setting on the mobile terminal device 
1 side, and there is no need to delete the DNS entry 
corresponding to the mobile terminal device 1 on the In- 
ternet, because even if the others learn the global ad- 
dress of the mobile terminal device 1 , it does not matter 
since the filtering by the router device 4 side is provided 
as described above. Also, by maintaining the global ad- 
dress setting in the mobile terminal device 1 , there is an 
advantage that the set up can be made quicker at a time 
of activating the application next time (as long as the 
network ID remains unchanged). 
[0075] Note that, in the case where a plurality of ap- 
plications can be activated on the mobile terminal device 
1 , it is possible to carry out the above described process- 
ing sequence when the termination of all the applica- 
tions that require the global address is detected first. 
[0076] In the above, the global address is made avail- 
able while the application that requires the global ad- 
dress is activated, but it is also possible to make the 
global address available while the application is activat- 
ed regardless of whetherthe activated application is one 
that requires the global address or not. 
[0077] Now, the above description is directed to the 
case where the neighbor cache entry itself in the router 
device 4 is to be deleted when the application that uses 
the global address is terminated at the mobile terminal 
device 1 side. This method presupposes the case where 
applications in which accesses to all the global address 
regions will be carried out by the initiative of the mobile 
terminal device 1 (such as WEB accesses), as well as 
applications in which packets destined to the mobile ter- 
minal device 1 will arrive from another node in terms of 
the global addresses such as VOIP that are increasingly 
used recently, will not be used after the use of the global 
address is ended. 

[0078] For this reason, it is possible to use a method 
in which a passing permitted protocol specifying mes- 
sage, that contains an application type or a protocol type 
that should be used in those packets which are permit- 
ted to be transferred individually even after the general 
use of the global address is ended by the neighbor 
cache entry deletion message, is transmitted from the 
mobile terminal device 1 to the router device 4 and reg- 
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isters it at the router device 4 side in advance, in order 
to make it possible to utilize the above noted applica- 
tions continuously even after the procedure for ending 
the use of the global address is carried out. In the fol- 
5 lowing, the exemplary configuration for providing such 
a function will be described. 

[0079] Fig. 8 shows an exemplary configuration of the 
router device 4 in this case. This router device 4 differs 
from that of Fig. 2 in that an access permission list 64 

10 to be defined for each mobile terminal device separately 
is added. When the received message is the passing 
permitted protocol specifying message, the message 
processing unit 62 makes an entry of the IPv6 global 
address of the corresponding mobile terminal device 1 

is and the protocol number for which the passing is to be 
permitted, into the access permission list 64. 
[0080] Fig. 9 shows an exemplary processing se- 
quence in this case. 

[0081 ] The mobile terminal device 1 constantly reads 
20 out the application type or protocol type that can possi- 
bly arrive, from the application list 24, and transmits the 
passing permitted protocol specifying message indicat- 
ing this application type or protocol type and the global 
address of the mobile terminal device 1 itself in advance, 
25 at a prescribed timing (as a preliminary processing of 
the address acquisition of Fig. 4, for example) or at ar- 
bitrary timing since the activation of the mobile terminal 
device 1 until the transmission of the neighbor cache 
entry deletion message (step S41). Note that if the glo- 
30 bal address has not been generated yet at this timing, 
it will be generated by the procedure as described 
above. 

[0082] Upon receiving the passing permitted protocol 
specifying message, the router device 4 makes an entry 
35 of the IPv6 global address of the corresponding terminal 
and the application type or protocol type for which the 
passing is to be permitted, into the access permission 
list 64. 

[0083] Then, when the neighbor cache entry deletion 
to message transmitted by the mobile terminal device 1 is 
received (step S42), the router device 4 checks whether 
an entry related to that mobile terminal device 1 is reg- 
istered in the access permission list 64 or not first, with- 
out deleting the corresponding entry in the neighbor 
45 cache 63 immediately. If there is a related entry in the 
access permission list 64, a flag associated with the cor- 
responding entry in the neighbor cache 63 is turned ON 
without checking the neighbor cache 63 itself. If there is 
no related entry in the access permission list 64, the cor- 
50 responding entry in the neighbor cache 63 itself is 
cleared similarly as in the case of Fig. 6. Then, the router 
device 4 returns the response message to the mobile 
terminal device 1 (step S43). 

[0084] After that, when a packet destined to the global 
55 address of the mobile terminal device 1 is transferred to 
the router device 4, the router device 4 determines 
whether this packet should be delivered or discarded, 
by referring to the neighbor cache entry, the flag asso- 
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dated with the neighbor cache entry, and the access 
permission list entry as follows, for example. 

(1 ) When there is no neighborcache entry, the pack- 
et is processed as error. 

(2) When there is a neighbor cache entry but the 
flag is ON, the access permission list is checked, 
and if there is an entry matching with the destination 
address an and the application type or protocol type 
of the packet, the packet is delivered. Otherwise, 
the packet is processed as error 

(3) When there is a neighbor cache entry and the 
flag is ON, the packet is delivered immediately. 

[0085] Fig. 10 shows an exemplary processing pro- 
cedure of the router device 4 in this case. 
[0086] When a packet destined to the global address 
of the mobile terminal device 1 arrives, the router device 
4 first refers to the neighborcache 63, forthe destination 
global address of the arrived packet (step S51), and if 
there is no corresponding entry (step S52 NO), this 
packet is processed as error and discarded (step S57). 
[0087] If there is a corresponding entry (step S52 
YES), the router device 4 refers to the flag associated 
with that entry (step S53), and if the flag is OFF (step 
S54 NO), this packet is delivered (step S58). 
[0088] If the flag is ON (step S54 YES), the router de- 
vice 4 refers to the access permission list 64, for the 
destination global address of the arrived packet (step 
S55), and if there is an entry matching with the destina- 
tion address and the application type or protocol type of 
this packet and this packet satisfies a condition for de- 
livery (step S56 YES), this packet is delivered (step 
S58). If there is no entry matching with the destination 
address and the application type or protocol type of this 
packet so that this packet does not satisfy a condition 
for delivery (step S56 NO), this packet is processed as 
error and discarded (step S57). 
[0089] In this way, it is possible to permit only the ar- 
rival of packets corresponding to a specific protocol 
group, for example, even after the ending of the use of 
the global address. 

[0090] The above described arrived packet process- 
ing according to the access permission list is an exem- 
plary case in which the access permission list is regis- 
tered from the mobile terminal device 1 to the router de- 
vice 4 side in advance such that the control is carried 
out by the router device 4 side, but it is also possible to 
use a configuration in which the first arrived packet is 
transferred from the router device 4 to the mobile termi- 
nal device 1 , whether or not to receive this packet is 
judged at the mobile terminal device 1 side, and whether 
or not to deliver packets is determined at this point. In 
the following, the exemplary configuration for providing 
such a function will be described. 
[0091] Fig. 11 shows an exemplary processing se- 
quence in this case. In this case, the access permission 
list is to be provided at the mobile terminal device 1 side 



rather than the router device 4 side. 
[0092] First, the mobile terminal device 1 generates a 
global address, and transmits the address information 
notification message containing the generated global 
5 address and the MAC address to the router device 4 in 
advance. 

[0093] Then, the first arrived packet is delivered from 
the router device 4 to the mobile terminal device 1 side 
without any change. 

10 [0094] At the mobile terminal 1 side, the source ad- 
dress and the protocol or the like of this packet are an- 
alyzed, and if it is a packet that should be received, the 
application is activated and communications are contin- 
ued. If it is a packet to be rejected, the mobile terminal 

is device 1 transmits a receiving rejection message which 
explicitly indicates the global address of the mobile ter- 
minal device 1 , the source address, and the application 
type or protocol type, to the router device 4 (step S62). 
Fig. 1 2 shows an exemplary message format of the re- 

20 ceiving rejection message that contains the global ad- 
dress, the source address and the protocol number. 
[0095] Upon receiving the receiving rejection mes- 
sage, the router device 4 sets up an appropriate filtering 
rule (a rule to be satisfied by packets to be discarded; 

25 such as a rule that enumerates combinations of the glo- 
bal address, the source address, and the protocol type 
for packets to be discarded, for example), according to 
the content of the receiving rejection message. There- 
after, the router device 4 is controlled such that any 

30 packet that satisfies this rule will not be transferred to 
the mobile terminal device 1 side even if it arrives re- 
peatedly. 

[0096] Fig. 13 shows an exemplary processing pro- 
cedure of the router device 4 in this case. 

35 [0097] When a packet destined to the global address 
of the mobile terminal device 1 arrives, the router device 
4 first refers to the neighborcache 63, forthe destination 
global address of the arrived packet (step S71), and if 
there is no corresponding entry (step S72 NO), this 

40 packet is processed as error and discarded (step S75). 
[0098] If there is a corresponding entry (step S72 
YES), the router device 4 refers to the filtering rule, for 
the destination global address of the arrived packet 
(step S73), and if this packet satisfies the filtering rule 

45 (step S74 YES), this packet is processed as error and 
discarded (step S75), whereas if this packet does not 
satisfy the filtering rule (step S74 NO), this packet is de- 
livered (step S76). 

[0099] Note that the mobile terminal device 1 may 
so have any one or two or all three of the three types of 
functions (a function explained with reference to Fig. 4, 
a function explained with reference to Fig. 9, and a func- 
tion explained with reference to Fig. 11) regarding the 
use of the global address and the delivery of the arrived 
55 packet described above. The same is also true for the 
router device 4. . 

[0100] Also, in the above, it is assumed that the mo- 
bile terminal device 1 has the ordinary voice communi- 
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cation function, but the mobile terminal device 1 may 
have communication functions for information in other 
forms such as text communications in addition to or in- 
stead of the ordinary voice communication function. The 
mobile terminal device 1 may be a device which is ca- s 
pable of utilizing only the Internet service. The similar 
modifications are also possible with respect to the serv- 
ices provided by the communication service provider. 
[0101] As described above, according to the present 
invention, the address assignment and the entry into the 10 
neighbor cache are carried out by each mobile terminal 
device only when communications using the global ad- 
dress are actually required by the application, so that 
attacking packets from the global Internet while commu- 
nications using the global address are unnecessary can '5 
be filtered out, and thereby the security with respect to 
the user of the mobile terminal device can be improved. 
Also, even in a state after the ending of the use of the 
global address, it is possible to receive the information 
delivery in a limited area by using a link local address 20 
or the user service limited within the mobile carrier by 
using a site local address. 

[0102] In the present invention, the mobile terminal 
device notifies a prescribed message to the nearest 
neighbor router device at a prescribed timing, and re- 25 
ceives the Internet service using the global address that 
is unique over the entire Internet while the application 
that requires the global address is activated, whereas 
otherwise the delivery of packets at the nearest neigh- 
bor router device can be stopped, for example. 30 
[0103] Also, even when the global address is not 
used, if there is a possibility for receiving the arriving 
service from the Internet (such as VoIP), this can be han- 
dled by controlling the nearest neighbor router device in 
such a way that, when a packet destined to the mobile 35 
terminal device is received, the protocol type or the like 
is checked and if it is a packet corresponding to the ar- 
riving service, this packet is delivered, or a security 
mechanism specific to the arriving service (such as at- 
taching an authentication code) is requested and this *o 
packet is passed after checking by that security mech- 
anism, for example. 

[0104] Also, by making at least one of the link local 
address and the site local address always utilizable at 
the mobile terminal device, it becomes always possible 
to receive a service closed within the mobile carrier 
(such as a mail arrival notification) or the advertisement 
delivery carried out in each base station area independ- 
ently. 

[0105] According to the present invention, it becomes so 
possible to carry out end-to-end communications when- 
ever necessary while also preventing the unnecessary 
packet attacks from the global Internet, without signifi- 
cantly changing the framework of the conventional IPv6. 
[0106] Thus according to the present invention, the 55 
arrived packets are delivered from the nearest neighbor 
router device to the mobile terminal device according to 
the need such as when a prescribed application is acti- 
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vated or when a prescribed packet has arrived, so that 
it is possible to prevent the unnecessary packet attacks 
from the global Internet. 

[0107] Note that the present invention can be realized 
easily by adding only some messaging protocol to the 
existing IPv6 devices, and the conventional IPv6 ad- 
dressing architecture can be used without any change. 
Consequently, it is advantageous in terms of the com- 
patibility with the existing devices. 
[0108] Note also that the present invention can be 
easily expanded according to the network management 
policies of the various mobile carriers. The present in- 
vention is also applicable not only to the IPv6 but also 
to the packet communications using the portable tele- 
phones that are proposed recently. 
[0109] It is to be noted that the above described em- 
bodiments according to the present invention may be 
conveniently implemented using a conventional general 
purpose digital computer programmed according to the 
teachings of the present specification, as will be appar- 
ent to those skilled in the computer art. Appropriate soft- 
ware coding can readily be prepared by skilled program- 
mers based on the teachings of the present disclosure, 
as will be apparent to those skilled in the software art. 
[0110] In particular, each of the mobile tenninal device 
and the router device of the above described embodi- 
ment can be conveniently implemented in a form of a 
software package. 

[0111] Such a software package can be a computer 
program product which employs a storage medium in- 
cluding stored computer code which is used to program 
a computer to perform the disclosed function and proc- 
ess of the present invention. The storage medium may 
include, but is not limited to, any type of conventional 
floppy disks, optical disks, CD-ROMs, magneto-optical 
disks, ROMs, RAMs, EPROMs. EEPROMs, magnetic 
or optical cards, or any other suitable media for storing 
electronic instructions. 

[0112] It is also to be noted that, besides those al- 
ready mentioned above, many modifications and varia- 
tions of the above embodiments may be made without 
departing from the novel and advantageous features of 
the present invention. 

[0113] Accordingly, all such modifications and varia- 
tions are intended to be included within the scope of the 
appended claims. 



Claims 

1 . A packet transfer method, comprising: 

generating a global address that is unique on 
Internet at a mobile terminal device, the global 
address being an address which should be 
used by the mobile terminal device in utilizing 
an Internet service provided by a mobile com- 
munication network to which the mobile termi- 
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nal device is connected, according to a mes- 
sage received from a nearest neighbor router 
device in the mobile communication network; 
notifying a first message indicating a start of a 
utilization of the Internet service using the glo- 5 
bal address, from the mobile terminal device to 
the nearest neighbor router device at a time of 
starting the utilization of the Internet service us- 
ing the global address; 

delivering arrived packets destined to the glo- 10 
bal address of the mobile terminal device from 
the nearest neighbor router device to the mo- 
bite terminal device upon receiving the first 
message at the nearest neighbor router device; 
notifying a second message indicating an end 15 
of the utilization of the I ntemet service using the 
global address from the mobile terminal device 
to the nearest neighbor router device at a time 
of ending the utilization of the Internet service 
using the global address; and 20 
discarding arrived packets destined to the glo- 
bal address of the mobile terminal device at the 
nearest neighbor router device upon receiving 
the second message at the nearest neighbor 
router device. 25 

The packet transfer method of claim 1 , further com- 
prising: 

notifying a third message from the mobile ter- 30 
minal device to the nearest neighbor router de- 
vice before notifying the second message, 
when delivery to the mobile terminal device of 
specific packets that satisfy a prescribed con- 
dition, that are destined to the global address 35 
of the mobile terminal device and that will arrive 
at the nearest neighbor router device after the 
second message is notified to the nearest 
neighbor router device is desired, the third mes- 
sage indicating a desire for the delivery of the *o 
specific packets to the mobile terminal device 
and the prescribed condition to be satisfied by 
the specific packets; and 
delivering the specific packets that satisfy the 
prescribed condition indicated by the third mes- 45 
sage among arrived packets destined to the 
global address of the mobile terminal device 
from the nearest neighbor router device to the 
mobile terminal device and discarding any oth- 
er arrived packets destined to the global ad- 50 
dress of the mobile terminal device at the near- 
est neighbor router device, after the second 
message is notified from the mobile terminal 
device upon receiving the third message from 
the mobile terminal device at the nearest neigh- 55 
bor router device. 

A packet transfer method, comprising: 



generating a global address that is unique on 
Internet at a mobile terminal device, the global 
address being an address which should be 
used by the mobile terminal device in utilizing 
an Internet service provided by a mobile com- 
munication network to which the mobile termi- 
nal device is connected, according to a mes- 
sage received from a nearest neighbor router 
device in the mobile communication network; 
notifying a first message indicating a start of a 
utilization of the Internet service using the glo- 
bal address, from the mobile terminal device to 
the nearest neighbor router device at a time of 
starting the utilization of the Internet service us- 
ing the global address; 

delivering arrived packets destined to the glo- 
bal address of the mobile terminal device from 
the nearest neighbor router device to the mo- 
bile terminal device upon receiving the first 
message at the nearest neighbor router device; 
notifying a second message from the mobile 
terminal device to the nearest neighbor router 
device, when delivery to the mobile terminal de- 
vice of a specific packet that is destined to the 
global address of the mobile terminal device 
and that has been delivered from the nearest 
neighbor router device is not desired, the sec- 
ond message indicating a desire for not receiv- 
ing the delivery of the specific packet to the mo- 
bile terminal device and a prescribed condition 
to be satisfied by the specific packet; and 
discarding the specific packet that satisfies the 
prescribed condition indicated by the second 
message among arrived packets destined to 
the global address of the mobile terminal device 
at the nearest neighbor router device after re- 
ceiving the second message from the mobile 
terminal device at the nearest neighbor router 
device. 

4. A mobile terminal device, comprising: 

a communication interface configured to make 
access to a mobile communication network; 
an address setting unit configured to set up a 
global address that is unique on Internet and 
that should be used by the mobile terminal de- 
vice in packet communications utilizing an In- 
ternet service provided by the mobile commu- 
nication network, according to a message re- 
ceived from a nearest neighbor router device in 
the mobile communication network; and 
a packet communication unit configured to car- 
ry out the packet communications utilizing the 
Internet service, notify a first message indicat- 
ing a start of a utilization of the Internet service 
using the global address to the nearest neigh- 
bor router device at a time of starting the utili- 
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zation of the Internet service using the global 
address, and notify a second message indicat- 
ing an end of the utilization of the Internet serv- 
ice using the global address to the nearest 
neighbor router device at alime of ending the 
utilization of the Internet service using the glo- 
bal address. 

5. The mobile terminal device of claim 4, wherein the 
packet communication unit notifies the first mes- 
sage when an application that requires the global 
address is activated, and notifies the second mes- 
sage when the application that requires the global 
address is terminated. 

6. The mobile terminal device of claim 4 or 5, wherein 
the packet communication unit also notifies a third 
message to the nearest neighbor router device be- 
fore notifying the second message, when delivery 
to the mobile terminal device of specific packets that 
satisfy a prescribed condition, that are destined to 
the global address of the mobile terminal device and 
that will arrive at the nearest neighbor router device 
after the second message is notified to the nearest 
neighbor router device is desired, the third message 
indicating a desire for the delivery of the specific 
packets to the mobile terminal device and the pre- 
scribed condition to be satisfied by the specific 
packets. 

7. The mobile terminal device of claim 4, 5 or 6, where- 
in the packet communication unit maintains an entry 
for the mobile terminal device already registered in 

. a name server on the Internet at a time of notifying 
the second message to the nearest neighbor router 
device. 

8. The mobile terminal device of any one of claims 4-7, 
wherein the packet communication unit maintains 
data on the global address already set in a TCP/IP 
module operating on the mobile terminal device at 
a time of notifying the second message to the near- 
est neighbor router device. 

9. A mobile terminal device, comprising: 

a communication interface configured to make 
access to a mobile communication network; 
an address setting unit configured to set up a 
global address that is unique on Internet and 
that should be used by the mobile terminal de- 
vice in packet communications utilizing ah In- 
ternet service provided by the mobile commu- 
nication network, according to a message re- 
ceived from a nearest neighbor router device in 
the mobile communication network; and 
a packet communication unit configured to car- 
ry out the packet communications utilizing the 



Internet service, notify a first message indicat- 
ing a start of a utilization of the Internet service 
using the global address to the nearest neigh- 
bor router device at a time of starting the utili- 
5 zation of the Internet service using the global 

address, and notify a second message to the 
nearest neighbor router device, when delivery 
to the mobile terminal device of a specific pack- 
et that is destined to the global address of the 
10 mobile terminal device and that has been de- 

livered from the nearest neighbor router device 
is not desired, the second message indicating 
a desire for not receiving the delivery of the spe- 
cific packet to the mobile terminal device and a 
15 prescribed condition to be satisfied by the spe- 

cific packet. 

10. The mobile terminal device of any one of claims 4-9, 
wherein the address setting unit sets up the global 

20 address when an application that requires the glo- 
bal address is activated. 

11. The mobile terminal device of any one of claims 
4-10, wherein the address setting unit sets up the 

25 global address according to a stateless address au- 
toconfiguration as defined by IPv6. 

12. The mobile terminal device of any one of claims 
4-1 1 , wherein the address setting unit also sets up 

30 one or both of a link local address that is valid only 
within a network link in the mobile communication 
network to which mobile terminal device is connect- 
ed, and a site local address that is valid only within 
a management domain containing the network link 
35 in the mobile communication network to which the 
mobile terminal device is connected, such that one 
or both of an Internet service using the link local ad- 
dress and an Internet service using the site local 
address are available to the packet communication 
40 unit. 

13. A router device provided in a mobile communication 
network providing an Internet service, the router de- 
vice comprising: 

45 

a message processing unit configured to trans- 
mit a router message to be used in assigning a 
global address that is unique on Internet with 
respect to a mobile terminal device within a net- 
50 work link to which the router device is connect- 

ed; and 

a router processing unit configured to deliver 
arrived packets destined to the global address 
of the mobile terminal device, to the mobile ter- 
55 minal device upon receiving a first message in- 

dicating a start of a utilization of the Internet 
service using the global address from the mo- 
bile terminal device, and discard arrived pack- 
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ets destined to the global address of the mobile 
terminal device upon receiving a second mes- 
sage indicating an end of the utilization of the 
Internet service using the global address from 
the mobile terminal device. 5 



A2 




ceiving delivery to the mobile terminal device 
of the specific packet that is destined to the glo- 
bal address of the mobile terminal device and 
the prescribed condition to be satisfied by the 
specific packet. 



14. The router device of claim 13, wherein the message 
processing unit is also configured to receive a third 
message from the mobile terminal device before re- 
ceiving the second message, the third message in- 
dicating a desire for delivery to the mobile terminal 
device of specific packets that satisfy a prescribed 
condition, that are destined to the global address of 
the mobile terminal device and that will arrive at the 
router device after the second message is notified 
to the router device, and the prescribed condition to 
be satisfied by the specific packets; and 

the router processing unit is also configured 
to deliver the specific packets that satisfy the pre- 
scribed condition indicated by the third message 
among arrived packets destined to the global ad- 
dress of the mobile terminal device, to the mobile 
terminal device, and discard any other arrived pack- 
ets destined to the global address of the mobile ter- 
minal device, after the second message is notified 
from the mobile terminal device upon receiving the 
third message from the mobile terminal device. 

15. The router device of claim 13 or 14, wherein the 
message processing unit is configured to transmit 
the router message regularly as a router advertise- 
ment message defined by IPv6, or individually as a 
response to a nearest neighbor router solicitation 
message from the mobile terminal device. 

16. A router device provided in a mobile communication 
network providing an Internet service, the router de- 
vice comprising: 

a message processing unit configured to trans- 
mit a router message to be used in assigning a 
global address that is unique on Internet with 
respect to a mobile terminal device within a net- 
work link to which the router device is connect- 
ed; and 

a router processing unit configured to deliver 
arrived packets destined to the global address 
of the mobile terminal device, to the mobile ter- 
minal device upon receiving a first message in- 
dicating a start of a utilization of the Internet 
service using the global address from the mo- 
bile terminal device, and discard a specific 
packet that satisfies a prescribed condition in- 
dicated by a second message among arrived 
packets destined to the global address of the 
mobile terminal device after receiving a second 
message from the mobile terminal device, the 
second message indicating a desire for not re- 



1 7. The router device of claim 1 6 , wherein the message 
processing unit is configured to transmit the router 
message regularly as a router advertisement mes- 

10 sage defined by I Pv6, or individually as a response 
to a nearest neighbor router solicitation message 
from the mobile terminal device. 

18. A computer program product for causing a compu- 
is ter to function as a mobile terminal device, the com- 
puter program product comprising: 

first computer program codes for causing the 
computer to make access to a mobile commu- 
20 nication network; 

second computer program codes for causing 
the computer to set up a global address that is 
unique on Internet and that should be used by 
the mobile terminal device in packet communi- 
25 cations utilizing an Internet service provided by 

the mobile communication network, according 
to a message received from a nearest neighbor 
router device in the mobile communication net- 
work; and 

30 third computer program codes for causing the 

computer to carry out the packet communica- 
tions utilizing the Internet service, notify a first 
message indicating a start of a utilization of the 
Internet service using the global address to the 
35 nearest neighbor router device at a time of 

starting the utilization of the Internet service us- 
ing the global address, and notify a second 
message indicating an end of the utilization of 
the Internet service using the global address to 
40 the nearest neighbor router device at a time of 

ending the utilization of the Internet service us- 
ing the global address. 

1 9. A computer program product for causing a compu- 
45 ter to function as a mobile terminal device, the com- 
puter program product comprising: 

first computer program codes for causing the 
computer to make access to a mobile commu- 
50 nication network; 

second computer program codes for causing 
the computer to set up a global address that is 
unique on Internet and that should be used by 
the mobile terminal device in packet communi- 
55 cations utilizing an Internet service provided by 

the mobile communication network, according 
to a message received from a nearest neighbor 
router device in the mobile communication net- 
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work; and 

third computer program codes for causing the 
computer to carry out the packet communica- 
tions utilizing the Internet service, notify a first 
message indicating a start of a utilization of the 
Internet service using the global address to the 
nearest neighbor router device at a time of 
' starting the utilization of the Internet service us- 
ing the global address, and notify a second 
message to the nearest neighbor router device, 
when delivery to the mobile terminal device of 
a specific packet that is destined to the global 
address of the mobile terminal device and that 
has been delivered from the nearest neighbor 
router device is not desired, the second mes- 
sage indicating a desire for not receiving the 
delivery of the specific packet to the mobile ter- 
minal device and a prescribed condition to be 
satisfied by the specific packet. 

20. A computer program product for causing a compu- 
ter to function as a router device provided in a mo- 
bile communication network providing an Internet 
service, the computer program product comprising: 

first computer program codes for causing the 
computer to transmit a router message to be 
used in assigning a global address that is 
unique on Internet with respect to a mobile ter- 
minal device within a network link to which the 
router device is connected; and 
second computer program codes for causing 
the computer to deliver arrived packets des- 
tined to the global address of the mobile termi- 
nal device, to the mobile terminal device upon 
receiving a first message indicating a start of a 
utilization of the Internet service using the glo- 
bal address from the mobile terminal device, 
and discard arrived packets destined to the glo- 
bal address of the mobile terminal device upon 
receiving a second message indicating an end 
of the utilization of the Internet service using the 
global address from the mobile terminal device. 
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20 
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nal device, to the mobile terminal device upon 
receiving a first message indicating a start of a 
utilization of the Internet service using the glo- 
bal address from the mobile terminal device, 
and discard a specific packet that satisfies a 
prescribed condition indicated by a second 
message among arrived packets destined to 
the global address of the mobile terminal device 
after receiving a second message from the mo- 
bile terminal device, the second message indi- 
cating a desire for not receiving delivery to the 
mobile terminal device of the specific packet 
that is destined to the global address of the mo- 
bile terminal device and the prescribed condi- 
tion to be satisfied by the specific packet. 

A carrier medium carrying computer readable in- 
structions for controlling the computer to carry out 
the method of any one of claims 1 to 3. 



35 



40 



21 . A computer program product for causing a compu- 
ter to function a router device provided in a mobile 
communication network providing an Internet serv- 
ice, the computer program product comprising: 



first computer program codes for causing the so 
computer to transmit a router message to be 
used in assigning a global address that is 
unique on Internet with respect to a mobile ter- 
minal device within a network link to which the 
router device is connected; and 55 
second computer program codes for causing 
the computer to deliver arrived packets des- 
tined to the global address of the mobile termi- 
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